In one of the landmark moments in cybersecurity history, a colossal acquisition almost unraveled at the last minute. The ambitious $25 billion union between Palo Alto Networks and CyberArk began with initial outreach in 2023 and was fraught with challenges. Despite initial reluctance from CyberArk, the accelerated timeline for the announcement was driven by media leaks, putting pressure on both parties to finalize the deal swiftly.
The journey began in May 2023 when Nikesh Arora, CEO of Palo Alto Networks, first proposed the acquisition to CyberArk’s founder Udi Mokady. CyberArk, determined to maintain its independent strategy, initially declined. However, after a two-year break in communication, Arora reignited discussions in June 2025, culminating in a mutual nondisclosure agreement by the end of that month. By July 1, an all-stock acquisition offer was submitted, valuing CyberArk at $457.99 per share.
CyberArk’s board recognized the strategic benefits of merging with Palo Alto Networks, including the potential to amplify its identity security platform on a global scale. Though initially hesitant to explore other offers due to the risk of leaks, CyberArk’s counterproposal demanded a higher share price and a significant termination fee, reflecting the importance of regulatory approval.
Negotiations intensified as both companies grappled with the deal’s terms. A series of proposals and counteroffers adjusted the share price and termination fees, reflecting the shifting dynamics and strategic considerations. An exclusivity agreement was reached in mid-July, but rumors of Palo Alto’s interest in other acquisitions added urgency to the proceedings.
As the deadline approached, tensions peaked when Palo Alto revised its offer due to stock price changes, prompting CyberArk to temporarily halt negotiations. However, after further discussions and a revised proposal, CyberArk’s board unanimously approved the transaction, highlighting the merger as providing the best value for shareholders. The deal was finalized and announced on July 30, securing its place as the second-largest acquisition in cybersecurity history.
